Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4618669CC38511EFA9848669762E951A.roa
File: 4618669CC38511EFA9848669762E951A.roa (raw, json)
Hash identifier: M8nAQNri6qlmhbvydtfu5HWtPkH4fBL79i/fmk/mx+c=
Subject key identifier: D7:7A:94:11:8E:F4:64:55:9E:B7:B3:8B:E2:D0:EF:FF:B4:5E:60:29
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01278A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4618669CC38511EFA9848669762E951A.roa
Signing time: Thu 26 Dec 2024 12:31:05 +0000
ROA not before: Thu 26 Dec 2024 12:31:01 +0000
ROA not after: Fri 12 Dec 2025 12:31:01 +0000
asID: 984
IP address blocks: 154.94.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75658 (0x1278a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 12:31:01 2024 GMT
Not After : Dec 12 12:31:01 2025 GMT
Subject: CN=676d4c88-b3d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:75:46:c3:f8:ab:d1:94:d8:b4:c7:a4:15:ea:
60:14:6b:44:c3:1f:4e:9c:29:7d:8b:4d:03:ae:a0:
2b:a6:ea:f6:68:0c:c9:9c:9c:f5:38:0b:c5:78:6e:
9d:89:d6:25:1f:c3:5e:6f:0d:98:a8:5f:d7:cc:be:
a3:f4:b8:4d:0a:d3:f2:f4:40:d7:b0:8b:67:c4:a5:
29:9c:86:ef:48:e8:d5:01:fe:13:a8:4f:17:6a:7c:
ab:65:97:d9:c1:db:7a:37:f3:12:b9:7a:4e:cf:15:
7a:1a:0f:b9:39:cd:59:41:d0:15:f8:e4:71:be:b8:
28:4d:8c:67:a9:32:fc:c2:d6:e9:3c:e4:6d:5f:52:
06:cd:d3:75:5c:ea:51:2e:0a:fd:91:26:ea:f2:3f:
e0:c9:19:7d:92:3c:93:0a:22:6f:74:80:74:b8:fb:
f4:2f:e7:56:ec:d0:b1:09:1b:16:de:92:bf:62:c3:
b6:47:d7:80:a8:b7:32:35:77:80:18:40:3b:c6:49:
81:12:bc:da:aa:b6:18:d3:24:04:a2:f2:5c:c1:b7:
55:19:98:81:ae:fb:da:96:15:02:55:65:d2:18:af:
ce:7e:a1:d5:bc:f4:31:d6:44:0a:09:9b:8c:4e:29:
2e:d7:be:11:42:db:5b:77:16:78:2a:f9:40:d1:30:
05:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:7A:94:11:8E:F4:64:55:9E:B7:B3:8B:E2:D0:EF:FF:B4:5E:60:29
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4618669CC38511EFA9848669762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.220.0/24
Signature Algorithm: sha256WithRSAEncryption
12:ee:d1:f9:76:0b:01:a0:4c:03:c7:d7:d4:bc:58:f0:42:c8:
4b:69:97:09:af:c8:bc:cb:37:10:44:f4:ed:a4:04:2c:32:26:
69:06:1d:45:64:44:39:46:8e:5a:26:4e:7a:d6:00:b7:c6:47:
cd:ff:e4:12:4d:a6:00:29:c0:82:35:aa:7b:a6:80:4a:a4:c3:
c6:f4:aa:4f:a1:d2:60:c8:16:22:c8:dd:ec:63:a7:de:24:d0:
18:9a:e3:60:6d:f3:69:a3:ef:1f:f9:71:51:53:44:4a:31:3e:
ed:a1:da:fd:a1:16:c7:85:10:dc:8d:ec:17:6b:ec:e6:68:fe:
05:1e:e3:a9:18:01:49:c7:c6:dc:5e:29:ad:ba:18:bf:08:de:
6a:cd:09:b0:85:0b:b8:9a:97:98:35:e2:7b:71:87:ee:ff:fe:
e8:e7:c3:aa:da:ae:30:6c:31:88:2b:79:29:59:d5:9c:e4:5e:
26:82:73:ac:be:0c:59:9a:28:84:79:7f:14:f0:96:86:81:5a:
3b:b2:e6:86:be:02:cb:59:da:b6:28:e5:1f:63:d5:f7:47:23:
c6:7a:e8:90:64:d2:8a:5f:af:26:66:a1:09:80:f1:b6:e7:57:
03:24:63:4b:89:e3:48:81:2a:12:1b:04:c3:6e:c7:6c:8b:21:
56:0d:2e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:18:09 2025 by rpki-client